$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer File: UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer (raw, json) Hash identifier: sQ/NtQJnkNXgJT1XfwGj9GaRiOrcwHiFzlE8icL4cqU= Subject key identifier: 53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:27 +0000 Certificate not after: Tue 14 Oct 2025 15:30:32 +0000 Subordinate resources: IP: 160.191.6.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6603 (0x19cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Feb 10 14:29:27 2025 GMT Not After : Oct 14 15:30:32 2025 GMT Subject: CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b3:78:8c:db:6a:85:6f:33:ef:7d:a2:66:7d: f6:86:10:57:31:42:78:91:01:8d:e7:16:c4:0d:b6: bd:31:6e:5e:b9:ac:89:b6:7f:81:06:af:46:89:87: ed:59:eb:99:1e:18:54:5a:4b:71:dd:31:56:79:2c: 34:c7:dc:6c:cd:a2:2a:d3:a2:1d:93:0b:f4:1f:ac: 5e:3e:b1:bb:9d:b6:ef:0a:d7:d6:75:a5:60:e7:b8: 7b:66:14:d4:66:9b:81:a1:51:7c:25:7f:34:7f:26: 1f:f2:4d:f5:91:59:a0:e0:4f:fb:47:67:5a:d3:c8: c3:12:85:d7:70:bb:6b:a1:7f:98:e1:fd:8d:33:89: 7c:71:44:9a:f1:0f:34:fb:27:ba:5b:a4:8e:08:09: 2b:0a:c7:8f:65:d9:42:ca:4a:db:c2:56:65:a9:59: d5:9e:76:b7:10:76:34:cb:22:33:1c:2e:ee:2b:92: b7:67:16:cc:0f:75:0f:5a:2b:f1:3b:49:ec:d6:b4: fd:74:61:e8:5e:fc:90:3a:fa:b0:c2:2f:5a:49:8f: 81:d8:c5:6a:6d:71:f8:a2:7e:84:6b:4b:f2:c6:3c: b5:90:42:fc:4f:1b:17:b9:c5:e3:87:83:19:a5:b7: cb:8f:43:97:7d:1c:35:89:4e:e5:f2:5e:62:0a:b4: 30:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.6.0/23 Signature Algorithm: sha256WithRSAEncryption 22:81:bb:02:0d:e3:61:58:b1:36:d2:2a:a7:05:84:a7:d4:e5: f8:cf:3e:64:43:f5:c0:d8:b7:dc:00:9c:a3:4f:56:b0:17:6a: 47:7e:92:ac:08:a6:e9:b0:80:11:f1:1c:1b:8b:d7:0d:04:16: a3:ad:32:ac:ad:27:92:cc:fe:b0:05:6b:42:5d:e4:f7:21:cc: 6b:d1:09:a9:75:9c:0f:57:bb:6c:01:dc:f8:56:96:c9:ff:05: 75:21:da:2e:24:5e:0a:47:f9:83:46:a3:6f:74:b5:d6:65:4d: 1f:05:23:df:45:78:49:59:95:80:c4:2c:50:09:41:d9:cf:ae: 80:d6:d5:1a:2d:fb:34:cb:66:62:50:7d:dd:b7:74:9c:e8:51: 80:2a:e9:21:90:80:30:36:d0:b5:2f:ce:67:ba:bc:a2:9f:a2: 4b:c0:49:d9:42:c5:e7:ec:ca:07:cf:97:fc:55:fd:39:4c:3f: 35:d8:ed:9d:26:53:cf:fe:7c:b2:af:f1:7b:ed:17:a8:77:7d: 12:0c:fd:d7:40:24:88:23:9d:ab:77:5a:b4:2d:c1:7c:b3:ed: e3:59:39:2d:71:b6:58:fe:d7:7d:32:4d:76:ba:68:f9:f4:1b: 74:8b:3f:f6:e6:e3:f8:5b:74:81:15:06:74:cf:88:d3:4d:fb: 3e:04:59:3b -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICGcswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyN1oXDTI1MTAxNDE1MzAzMlowMzEx MC8GA1UEAxMoNTMyMkU2MUFFOEM4REQ4OTUzRTFFNkJEQzk2QUU0ODI3QUZDRjk5 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPGzeIzbaoVvM+99omZ9 9oYQVzFCeJEBjecWxA22vTFuXrmsibZ/gQavRomH7VnrmR4YVFpLcd0xVnksNMfc bM2iKtOiHZML9B+sXj6xu5227wrX1nWlYOe4e2YU1GabgaFRfCV/NH8mH/JN9ZFZ oOBP+0dnWtPIwxKF13C7a6F/mOH9jTOJfHFEmvEPNPsnulukjggJKwrHj2XZQspK 28JWZalZ1Z52txB2NMsiMxwu7iuSt2cWzA91D1or8TtJ7Na0/XRh6F78kDr6sMIv WkmPgdjFam1x+KJ+hGtL8sY8tZBC/E8bF7nF44eDGaW3y49Dl30cNYlO5fJeYgq0 MK0CAwEAAaOCAk4wggJKMB0GA1UdDgQWBBRTIuYa6MjdiVPh5r3JauSCevz5kDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVZVU4vMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TEVZVU4vVXlMbUd1akkzWWxUNGVhOXlXcmtnbnI4LVpBLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaC/BjANBgkqhkiG9w0BAQsFAAOCAQEAIoG7 Ag3jYVixNtIqpwWEp9Tl+M8+ZEP1wNi33ACco09WsBdqR36SrAim6bCAEfEcG4vX DQQWo60yrK0nksz+sAVrQl3k9yHMa9EJqXWcD1e7bAHc+FaWyf8FdSHaLiReCkf5 g0ajb3S11mVNHwUj30V4SVmVgMQsUAlB2c+ugNbVGi37NMtmYlB93bd0nOhRgCrp IZCAMDbQtS/OZ7q8op+iS8BJ2ULF5+zKB8+X/FX9OUw/NdjtnSZTz/58sq/xe+0X qHd9Egz910AkiCOdq3datC3BfLPt41k5LXG2WP7XfTJNdrpo+fQbdIs/9ubj+Ft0 gRUGdM+I0037PgRZOw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:56 2025 by rpki-client on console.sobornost.net